- Added support for TLS 1.3 on Amazon MSK provisioned clusters via selectable security policies.
- Customers can opt‑in to TLS 1.3‑only or mixed TLS 1.2/1.3 policies; connections not meeting the policy are rejected.
- Feature is available at no additional cost and does not affect existing clusters until a new policy is applied.